Spamassassin - CVE-2020-1946

[DavidMerrill]

Anyone catch wind of this yet?

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1946
• https://nvd.nist.gov/vuln/detail/CVE-2020-1946

Thanks for getting the 6.4 update out!

 

[tom]

This is already fixed in our packages.

> apt changelog proxmox-spamassassin

proxmox-spamassassin (3.4.5-1) pmg; urgency=medium

  * update to version 3.4.5 (containing a fix for CVE-2020-1946)

  * update KAM.cf

  * update ruleset

 -- Proxmox Support Team <support@proxmox.com>  Wed, 24 Mar 2021 17:44:54 +0100

 

[DavidMerrill]

Yes (hence the thank-you!), I shoud've mentioned that, glad to have the update!

This kind of supply-chain vulnerability gives me the chills...